Sub-processors
Adacraft uses the following sub-processors to provide the service. We will announce new sub-processors on this page before they start processing customer personal data (see section 5 of the DPA).
| Sub-processor | Purpose | Data processed | Location | Transfer safeguard | Status |
|---|---|---|---|---|---|
| Anthropic PBC | Claude API: briefs, keyword research, store texts, SEO/GEO content, GEO checks with web search, screenshot captions, video scripts | App information, texts and selected images you send with an AI feature; no account password or payment data | United States | SCCs (2021/914) in the provider DPA; EU–US DPF if certified [verify — TODO] | Active |
| fal.ai [legal entity — TODO] | AI media generation (AI ad videos) | Prompt text and reference images you choose for an AI video | United States | SCCs / DPF [verify — TODO] | Planned — only once AI video is enabled |
| [Application hosting — TODO] | Runs the web app, API and background workers | All service data in transit and in use | [region — TODO] | [TODO] | To be decided |
| [Database hosting (PostgreSQL) — TODO] | Stores accounts, workspace content, consent records, credit history | All service data at rest | [region — TODO] | [TODO] | To be decided |
| [Object storage (S3-compatible) — TODO] | Stores uploaded and generated files and data-export packages | Screenshots, recordings, rendered images/videos, ZIP files | [region — TODO] | [TODO] | To be decided |
| E-mail delivery | Transactional e-mail (invitations, password reset) | — | — | — | None yet: no e-mail provider is connected |
| Payment provider | Checkout and invoicing | — | — | — | None yet: payment provider not decided |
Not sub-processors
- Google (optional "Continue with Google" sign-in) acts as an independent controller for authentication.
- Apple App Store and Google Play public store pages are read when you import an app; no customer personal data is sent to them.
Türkiye
For users in Türkiye, transfers to the AI providers above are based on explicit consent under KVKK Art. 9 (see the Yurt Dışına Aktarım Açık Rıza Metni). [KVKK standard contracts with the providers and notification to the KVKK Authority within 5 business days of signature — TBD.]